UBUNTU-CVE-2023-31356

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

References

Affected packages

Ubuntu:24.04:LTS / amd64-microcode

Package

Name: amd64-microcode
Purl: pkg:deb/ubuntu/amd64-microcode@3.20250311.1ubuntu0.24.04.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20250311.1ubuntu0.24.04.1

Affected versions

3.*

3.20230808.1.1ubuntu1

3.20231019.1ubuntu1

3.20231019.1ubuntu2

3.20231019.1ubuntu2.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "3.20250311.1ubuntu0.24.04.1",
            "binary_name": "amd64-microcode"
        }
    ],
    "availability": "No subscription required"
}